https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T00:04:27.592203+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-01227 bdu:2019-01227 2026-10-08T00:04:27.599148+00:00 bdu:2019-01227 https://cve.radiocsirt.org/vuln/cnvd-2018-11846 cnvd-2018-11846 2026-10-08T00:04:27.599187+00:00 cnvd-2018-11846 https://cve.radiocsirt.org/vuln/euvd-2026-65867 EUVD-2026-65867 2026-10-08T00:04:27.599201+00:00 EUVD-2026-65867 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12533 fkie_cve-2018-12533 2026-10-08T00:04:27.599238+00:00

JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310.

 https://cve.radiocsirt.org/vuln/ghsa-4j38-wjhf-884r GHSA-4j38-wjhf-884r — Arbitrary code execution in Richfaces 2026-10-08T00:04:27.599272+00:00

Affected: Maven: org.richfaces:richfaces-core

JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310.

 https://cve.radiocsirt.org/vuln/gsd-2018-12533 gsd-2018-12533 2026-10-08T00:04:27.599296+00:00 gsd-2018-12533 https://cve.radiocsirt.org/vuln/rhsa-2018:2663 RHSA-2018:2663 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2 security update 2026-10-08T00:04:27.599308+00:00

RichFaces: Injection of arbitrary EL expressions allows remote code execution via org.richfaces.renderkit.html.Paint2DResource